Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/9SYiUsGNYYpPMiKlgG5h_zUeNtY.roa
File: 9SYiUsGNYYpPMiKlgG5h_zUeNtY.roa (raw, json)
Hash identifier: WBKefrF3GnnCh5VDduo8h8Hom5XEDRyWVgM5HA6GaGI=
Subject key identifier: F5:26:22:52:C1:8D:61:8A:4F:32:22:A5:80:6E:61:FF:35:1E:36:D6
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0183FF95D18A4CD4E824C53196D5B96CF9DF
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/9SYiUsGNYYpPMiKlgG5h_zUeNtY.roa
Signing time: Sat 22 Oct 2022 12:05:51 +0000
ROA not before: Sat 22 Oct 2022 12:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:95:d1:8a:4c:d4:e8:24:c5:31:96:d5:b9:6c:f9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Oct 22 12:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5262252c18d618a4f3222a5806e61ff351e36d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:89:9d:74:e7:55:f2:69:ae:be:ac:5f:6d:
e7:5a:03:ea:d1:e9:0f:85:fb:08:ec:06:35:59:4d:
24:c3:11:4b:4c:90:2f:08:fb:db:b8:35:a1:07:60:
3f:82:8e:6a:c8:51:34:69:c2:0a:fa:07:40:c9:a4:
2b:c8:4c:c8:44:53:f5:8c:4b:f6:ac:e0:e0:eb:d3:
cb:1a:90:d9:87:48:0a:85:56:d0:a5:ee:b4:ad:71:
91:98:32:ba:6c:db:ef:09:aa:2b:b6:e7:49:0d:8d:
a3:fe:db:b4:6a:ca:84:55:27:ed:8f:87:44:04:09:
3b:67:26:45:29:2b:11:62:1d:f6:4e:65:e9:16:a1:
f7:02:78:0d:18:86:f2:29:da:e4:b0:e3:54:d7:68:
74:da:fd:70:e4:0e:94:42:51:82:33:66:f8:8d:9a:
27:0a:03:ae:c0:51:fa:af:4a:70:75:e2:48:69:c1:
b3:06:6b:83:6f:ef:75:17:01:fb:50:88:d0:8c:5b:
20:cc:a8:a4:de:93:d3:e7:7a:5e:4d:0c:4d:bd:f2:
30:d4:0e:d6:84:86:d5:b6:f0:ad:37:d3:69:67:ab:
e1:7b:c9:a9:0f:46:56:44:08:96:a9:b2:41:01:82:
66:4a:ab:b4:c4:4d:dd:f8:63:72:7b:16:a9:99:5a:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:26:22:52:C1:8D:61:8A:4F:32:22:A5:80:6E:61:FF:35:1E:36:D6
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/9SYiUsGNYYpPMiKlgG5h_zUeNtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3f:ef:2b:32:4b:c3:c9:6b:06:b3:f5:5a:a8:63:ee:60:e7:
df:94:6d:da:80:f0:c0:60:69:8b:b6:75:6d:23:d8:d2:42:d1:
fe:28:02:fb:b9:14:63:88:7f:0c:f1:58:29:81:e1:59:32:0c:
28:de:e2:9f:4f:6d:59:4e:c7:de:28:03:eb:3d:d7:75:6f:c3:
2f:c0:84:b5:aa:1d:80:a1:ba:ba:7e:53:ea:f5:46:7c:e2:dd:
bc:1d:ac:68:09:52:ff:ff:39:d6:cb:98:ac:8b:34:6f:ad:51:
d3:54:9e:d5:d4:c5:7e:c8:3a:d5:36:52:d5:c9:43:19:be:23:
5b:44:b0:53:01:da:7c:b4:79:8e:1d:98:e2:d3:59:a0:b3:a3:
e2:2e:b1:05:a0:ac:94:61:7d:af:b6:69:24:66:8d:6b:37:f2:
e6:f2:60:6d:73:a0:96:36:c2:18:2b:ad:98:cf:1f:81:b9:a3:
30:04:b6:af:1d:6a:c9:8a:9d:21:d8:6b:28:a2:2a:e5:7b:76:
25:6f:83:c4:53:49:8f:c2:a6:fd:e0:07:c0:83:62:f2:26:d9:
d3:80:6d:cc:4f:10:b7:52:8a:3e:a4:dc:d6:d4:d4:70:b2:e2:
b5:4c:9b:87:44:63:40:e9:2c:bd:00:b8:7b:d9:e7:72:86:19:
03:6e:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org